Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/167df5e4-9539-35bd-83ee-39c1f78d4e32.roa
File:                     167df5e4-9539-35bd-83ee-39c1f78d4e32.roa (raw, json)
Hash identifier:          S+jU7Jc8mgHP2pqyowvcQX2CfmV+kxI0FdG3dVmSqzk=
Subject key identifier:   EC:69:27:71:9D:BC:42:EF:85:D5:F9:EB:5B:76:FA:6E:37:40:F7:B1
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584B110C0ACED07BFA8724FA0180
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/167df5e4-9539-35bd-83ee-39c1f78d4e32.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     7992
IP address blocks:        2001:1970::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:0a:ce:d0:7b:fa:87:24:fa:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=1f97ec35-e338-4952-a8e9-8cd9f2ec7125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:94:b9:a6:59:7a:e8:a4:e3:33:93:b6:14:
                    aa:a3:5a:f7:ca:2f:80:c0:52:68:ec:70:ee:f9:87:
                    50:0f:cb:dc:b0:b2:e5:f7:f8:20:f9:43:f7:5d:10:
                    08:50:ca:a7:08:04:ef:0d:17:df:49:04:ed:ad:97:
                    e7:9b:bb:f0:6e:78:9c:ed:4b:3e:14:0c:2e:f7:6e:
                    8c:a3:9e:33:bf:60:1b:61:bc:2c:c7:55:8c:f1:27:
                    14:b0:4f:bd:35:6f:11:d4:b7:1e:da:a2:1e:0d:62:
                    ee:c8:bc:63:4f:bb:60:ba:01:6c:d2:1b:bc:d2:d1:
                    d8:11:91:01:86:55:56:1c:fc:aa:06:eb:85:eb:eb:
                    a7:ba:91:63:74:96:c9:3e:63:7b:0d:63:84:db:9c:
                    09:de:b0:ea:46:58:ff:e1:17:29:da:e9:d7:a4:0d:
                    8c:a3:cd:30:04:c5:89:f9:ac:de:9a:7e:b1:84:a7:
                    7b:f2:f8:2e:c4:9c:f5:3f:aa:35:dd:ab:bd:4c:f7:
                    6c:23:a4:07:7f:fe:6b:e9:b2:04:f7:2a:26:cd:46:
                    97:69:0a:f7:41:94:49:e5:82:2e:ae:ed:55:97:a8:
                    e9:24:37:07:41:99:69:c1:ba:d7:b2:1f:e8:33:61:
                    00:87:52:49:41:04:ee:f0:a4:7a:86:f5:85:6e:06:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:69:27:71:9D:BC:42:EF:85:D5:F9:EB:5B:76:FA:6E:37:40:F7:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/167df5e4-9539-35bd-83ee-39c1f78d4e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1970::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4c:07:54:09:33:f9:ef:7b:5d:e1:33:47:d7:64:c1:2e:bb:
         d0:85:9f:03:63:e0:24:28:17:28:a6:e9:af:38:3f:f0:28:08:
         9f:27:bf:9a:05:02:c7:b4:12:40:9f:67:96:1c:4c:37:47:78:
         ed:96:82:1e:e0:7c:81:b0:c1:d8:83:f0:63:31:cb:3d:21:f8:
         ff:80:bf:77:ca:69:1f:07:85:89:f1:5a:98:a2:7f:0b:02:b3:
         8b:98:99:19:62:b7:6a:12:14:32:1a:04:2b:51:60:96:48:42:
         fd:40:7b:36:85:2b:b1:4e:25:58:54:54:61:57:2e:c6:82:84:
         c8:4b:0b:dc:27:05:4c:1e:f8:61:14:7b:45:bb:68:3b:5f:5f:
         fb:49:1d:c9:49:3d:f1:a7:db:92:f6:46:44:ac:ef:f5:56:96:
         cb:ec:93:db:67:04:49:1a:e4:80:3e:a2:17:c7:11:d5:d5:75:
         b6:d6:e2:52:e3:e1:39:5b:cb:54:e9:e2:52:11:1d:21:eb:93:
         a8:31:32:de:39:f6:8b:9b:38:ae:7b:59:ec:26:c8:61:0c:25:
         d6:fe:5d:e9:ad:8b:83:ad:5f:54:80:04:14:b8:64:79:fa:0f:
         c1:05:b8:55:e0:39:82:d0:be:af:55:55:22:32:e7:26:98:60:
         54:b9:3d:bf
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsRDArO0Hv6hyT6AYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm
Zjk4MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk
MWY5N2VjMzUtZTMzOC00OTUyLWE4ZTktOGNkOWYyZWM3MTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu2UuaZZeuik4zOTthSqo1r3yi+AwFJo7HDu
+YdQD8vcsLLl9/gg+UP3XRAIUMqnCATvDRffSQTtrZfnm7vwbnic7Us+FAwu926M
o54zv2AbYbwsx1WM8ScUsE+9NW8R1Lce2qIeDWLuyLxjT7tgugFs0hu80tHYEZEB
hlVWHPyqBuuF6+unupFjdJbJPmN7DWOE25wJ3rDqRlj/4Rcp2unXpA2Mo80wBMWJ
+azemn6xhKd78vguxJz1P6o13au9TPdsI6QHf/5r6bIE9yomzUaXaQr3QZRJ5YIu
ru1Vl6jpJDcHQZlpwbrXsh/oM2EAh1JJQQTu8KR6hvWFbgY2YQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOxpJ3GdvELvhdX561t2+m43QPexMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy
ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvMTY3ZGY1ZTQtOTUzOS0z
NWJkLTgzZWUtMzljMWY3OGQ0ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1
ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3
ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5
OThjN2ZmOTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZcDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAOTAdUCTP573td4TNH12TBLrvQhZ8DY+AkKBcopumvOD/wKAifJ7+a
BQLHtBJAn2eWHEw3R3jtloIe4HyBsMHYg/BjMcs9Ifj/gL93ymkfB4WJ8VqYon8L
ArOLmJkZYrdqEhQyGgQrUWCWSEL9QHs2hSuxTiVYVFRhVy7GgoTISwvcJwVMHvhh
FHtFu2g7X1/7SR3JST3xp9uS9kZErO/1VpbL7JPbZwRJGuSAPqIXxxHV1XW21uJS
4+E5W8tU6eJSER0h65OoMTLeOfaLmziue1nsJshhDCXW/l3prYuDrV9UgAQUuGR5
+g/BBbhV4DmC0L6vVVUiMucmmGBUuT2/
-----END CERTIFICATE-----
Generated at Fri Oct 10 14:10:07 2025 by rpki-client